Hello Cameron Thank you for reaching out. I would like to confirm that Azure RBAC just for control Azure subscription resource access here, it will not work for Azure subscription creation. For creating Azure subscriptions, based on this official doc, only users who have billing roles: Invoice section owner, Invoice section contributor, Azure subscription creator. Only these roles would be able to create Azure subscriptions. Billing roles belongs to your billing account . This doc describes the relationship with billing account with your subscriptions well. I hope this answer helps to resolve your issue. Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Azure RBAC For Allowing a User to Create a subscription
Cameron
0
Reputation points
What Role can I grant an AD user in Azure that will allow them to Create Subscriptions? I already know how to grant a user RBAC access to an existing subscription but am at a loss as to how to grant permission to create.
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
976 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
25,130 questions
1 answer
Sort by: Most helpful
-
Harpreet Singh Matharoo 8,396 Reputation points Microsoft Employee Moderator
2023-04-11T02:36:03.58+00:00